tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

#12123 Clear html tag characters to prevent XSS attacks

This commit is contained in:
miguel angel rasteu 2023-09-26 09:37:48 +02:00
parent fbeb616eb8
commit bcecfbfdcc
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pandora_console/godmode/reporting/visual_console_builder.php
View File

@ -164,6 +164,8 @@ switch ($activeTab) {
$width = (int) get_parameter('width');
$height = (int) get_parameter('height');
$visualConsoleName = (string) get_parameter('name');
$visualConsoleName = str_replace('<', '', $visualConsoleName);
$visualConsoleName = str_replace('>', '', $visualConsoleName);
$is_favourite = (int) get_parameter('is_favourite_sent');
$auto_adjust = (int) get_parameter('auto_adjust_sent');